- RootKit Revealer Log
- Posted by yogi on January 27th, 2006
Hi,
I just ran the rootkit revealer on my system and it listed these entries:
HKLM\System\ControlSet001\Services\Schedule\NextAt JobId and shows the
description as data mismatch between windows api and raw hive data.
Is this normal?? If not, what can i do to correct this?
All help appreciated
yogi
- Posted by JRosenfeld on January 28th, 2006
From Rootkit revealer's help file (you may not have thought of reading that :-)
Data mismatch between Windows API and raw hive data.
This discrepancy will occur if a Registry value is updated while the
Registry scan is in progress. Values that change frequently include
timestamps such as the Microsoft SQL Server uptime value, shown below, and
virus scanner "last scan" values. You should investigate any reported value
to ensure that its a valid application or system Registry value.
"yogi" wrote:
- In XP HOme I found rootkit hiding? (Microsoft Windows) by Joe K
- Cryptography RootKit Embedded in XP Home (Security & Administration) by ThGrim
- Virus, rootkit or something else ??? Strange network behavior... (Security & Administration) by Xavier
- Rootkit Query (Security & Administration) by Paranoid
- Sony RootKit on Music CDs, Detection Tool (Microsoft Windows) by R. McCarty

